Privacy Policy

1. Controller

CoParent.ch, Raphaël Zürcher, Rue de l’Auberge 3A, 1142 Pampigny, Switzerland — contact: privacy@coparent.ch.

2. Data processed

• Account: first name, email address, password (hashed), language, notification preferences; if you enable it, the two-factor authentication secret.
• Optional contact details: phone number (SMS), postal address and IBAN (QR-bill). The IBAN is encrypted in our database.
• Children: first name and, if you provide them, date of birth and gender; canton and school calendar.
• Household content: custody schedule, change requests, appointments, notes, messages between parents, expenses and receipts, documents.
• Sensitive data: depending on what you upload, health data (health record, certificates, prescriptions), information on judicial or administrative proceedings (agreement, court decision, child protection authority decision) or on social assistance measures. Such data enjoys enhanced protection (art. 5(c) FADP, art. 9 GDPR).
• Third-party data: documents and entries may concern other people (a new partner, teachers, doctors…). Only upload them where necessary and lawful (Terms, section 14).
• Technical and security data: IP address, browser, sign-in history, audit log of actions in the household, record of acceptance of the Terms (version, date, IP, browser).
• Support: your requests (messages and attachments) and their metadata.
• Service rating: the rating (1 to 5 stars) and the optional comment you give about CoParent.ch, with their date; a rating of 2 stars or less opens a support request in your name. CoParent.ch does not send your rating or comment to Google: if you choose to publish a review, your comment is copied to your clipboard and you paste it yourself on the Google review page that opens in your browser; Google then processes that review under its own responsibility.
• Payment: handled by Stripe; we receive the subscription status, never your card details.
• Advertising measurement (public website only, with your consent): Google Ads cookies, pages visited, IP address and device data — see the cookie policy.

3. Purposes

Providing the Service (schedule, requests, messages, expenses, documents, reports, notifications, QR-bill); analysing a receipt or an agreement at your request (section 6); managing the subscription and billing; ensuring security (logs, abuse prevention); handling support; collecting your feedback on the Service and following up on reported dissatisfaction; producing aggregate statistics; with your consent, measuring the effectiveness of our Google Ads campaigns.

4. Legal bases

Performance of the contract (Terms); legitimate interest (security, abuse prevention, aggregate statistics, improving the Service from the ratings you choose to give); consent (non-essential cookies, advertising measurement, SMS, a professional’s access to the file); legal obligation (retention of accounting records). Sensitive data is processed because you choose to upload it in order to share it with the other parent; where the GDPR applies, this processing is based on your explicit consent, which you can withdraw by asking us.

5. Who has access to your data

• Household members: content is visible to members according to their role and, in a blended family, according to the children each is linked to. Read-only guests can view without editing.
• Accompanying professional: only with each parent’s consent (section 13).
• CoParent team: authorised team members access account and subscription data (household name, first names, emails, status, sign-in history) to operate the Service, and the content of support requests. They access a household’s content only where necessary to handle a request you send us, a security incident or a legal obligation. Our servers process data in clear text: the Service is not end-to-end encrypted.
• Calendar links (iCal): if you create a calendar subscription link, anyone who has the link can read, without signing in, the custody schedule (the parent’s first name for each day) and the appointments it contains. You can revoke the link at any time from the agenda.
• SMS: if you enable SMS, your number and the message text are sent to ASPSMS (Switzerland).
• Push notifications: if you enable them, they pass in encrypted form through your browser’s notification service (for example Google, Apple or Mozilla), which may be located outside Switzerland.
• Address lookup: the address entered for the QR-bill is looked up via the Swiss Confederation’s geodata service (geo.admin.ch).
• Sub-processors: hosting, email, AI, payment, SMS and error tracking — see the list of sub-processors.
• Authorities: only where the law requires us to.

6. Artificial intelligence features

Two optional features use Infomaniak AI Tools (Infomaniak Network SA), in Switzerland, with open-source models. They only run when you trigger them; manual entry sends no data to the provider.

• Receipt analysis: sends the file (image or PDF), the children’s first names and the names of the household’s expense categories; returns a suggested amount, date, child, category and label.
• Reading an agreement or a court decision: sends the PDF (possibly converted into page images) or the text you type, together with the first names of household members; returns suggested custody rules. CoParent does not keep the imported file.
• Human review: every result is a suggestion, displayed for review and editable before it is saved or applied. There is no automated individual decision (art. 21 FADP, art. 22 GDPR).
• Risk of error: the model may misread a document or suggest a wrong value; always check the result.
• Use of the data: the provider processes this data on our behalf in order to answer the request. CoParent does not use your documents to train models.

7. Sub-processors

Detailed list and safeguards: list of sub-processors.

8. Transfers outside Switzerland

Hosting, backups, email, AI, SMS and address lookup are provided in Switzerland. Data is transferred outside Switzerland in the following cases: Stripe (Ireland, and the United States for certain operations) receives the data needed for payment, including the household name, the payer’s email and the billing history — standard contractual clauses and Data Privacy Framework; Google Ireland Ltd. / Google LLC (Ireland, United States) receives advertising measurement data from the public website, only with your consent — standard contractual clauses and Data Privacy Framework; Sentry (EU data region, Germany) receives technical error reports, without household data; push notifications pass through your browser’s service (section 5). The emails we send you pass through the email provider you use.

9. Retention periods

• Active household: as long as the household exists.
• Household deletion requested: permanent erasure 30 days after the request.
• Trial ended without a subscription: permanent erasure 90 days after the end of the trial.
• Subscription cancelled: permanent erasure 90 days after the subscription ends, unless a new subscription is taken out.
• Individual account deleted on request: account data deleted or anonymised within 30 days; shared content remains in the household (Terms, section 8).
• Sign-in history: 90 days. Audit log: 12 months.
• Support conversations: 24 months after the request is closed.
• Service rating: as long as the account exists.
• Record of acceptance of the Terms: as long as the account exists.
• Accounting records: 10 years (art. 958f of the Swiss Code of Obligations).
• Backups: daily database backup, encrypted and stored in Switzerland (Infomaniak Swiss Backup), kept for 30 days at most; erased data may remain there for up to 30 days.
• Anonymous statistics: when a household is permanently erased (deletion requested or trial not converted), we keep, without time limit, an anonymous statistical record (week of creation, dates of the onboarding steps, number of children and members, usage volumes, origin and reason for erasure). It contains no identifier, name, e-mail address or entered text and cannot be linked to a person.
• Unaccepted invitations: the invited person's e-mail address and first name are kept for up to 30 days after the invitation expires, then deleted.

10. Your rights

You can request access to your data, its rectification or erasure, restriction of processing or object to it, withdraw your consent and receive your data in a common format. An owner downloads the full household export (ZIP) from Settings › Privacy; other members obtain it on request. Write to privacy@coparent.ch; we reply within 30 days. You may also contact the FDPIC or, where the GDPR applies, the data protection authority of your country.

11. Security

Connections encrypted in transit (HTTPS/TLS, HSTS); hashed passwords (bcrypt); two-factor authentication available (TOTP app); IBAN encrypted in the database; separation between households; audit log; restricted administrative access; encrypted daily backups stored in Switzerland (Infomaniak Swiss Backup). Other data is hosted in Switzerland but is not encrypted by the application, and the Service is not end-to-end encrypted.

12. Data security breaches

If a data security breach is likely to result in a high risk to your rights, we report it to the FDPIC as soon as possible and inform you where the law requires it or where it is necessary for your protection (art. 24 FADP; arts. 33 and 34 GDPR).

13. Sharing with an accompanying professional

When a practice (family mediation, law firm, child protection guardianship, social service) opens your household for you, a mandate links that practice to your household. The practice can see at all times the information it entered itself and the follow-up status (parents invited or active, trial, subscription); it only accesses the content of your file if you consent.

• What is shared: the identity of the practice and the status of the mandate, at all times. With your consent: schedule, swap requests, reports, documents and expenses — never your messages.
• Who decides: each parent gives or refuses consent when accepting the invitation. The refusal of a single parent closes access, and the other parent’s acceptance does not reopen it.
• Revocation: each parent can withdraw access at any time, alone, from their account.
• Traceability: the creation of the household by the practice, each consent, each refusal and each consultation are recorded in your audit log, which you can export.
• Legal basis: performance of the contract for the mandate status, your consent for access to the file.
• Retention: the mandate is deleted together with your household; it never outlives it.

14. Children

The Service is reserved for adults. Children are not users: their data is entered by their parents, who make sure to share only what is useful for their organisation. This data is used for no purpose other than providing the Service.

15. Cookies

See the cookie policy.

16. Changes

Any substantial change is presented to you from the moment it is published, the next time you sign in, with an explicit choice to accept or reject it, under the terms and with the consequences described in section 21 of the Terms of Use. Previous versions are archived and available on request.